Release v1.3.1

github-actions released this 30 Jul 18:34

· 20 commits to main since this release

5e9c8a3

v1.3.1

Changelog

Security

REQ-SEC-005 — CSRF on bare manage POSTs that previously lacked tokens: column reorder, task move (kanban drag), task advance, priority update, remove link, remove member. Invalid/missing _token → access denied (fail-closed). Bundle Twig and board Stimulus fetch now send matching tokens.

Full Changelog: v1.3.0...v1.3.1

Assets 2